Tüm alıştırma soruları

A financial services company manages $45$ member accounts within an AWS Organization. The security team is setting up an organization-wide AWS CloudTrail trail to log all API activity to a centralized Amazon S3 bucket located in a dedicated Security account. The S3 bucket must be encrypted using a Customer Managed Key (CMK) in AWS Key Management Service (AWS KMS) to comply with regulatory standards. Which combination of configuration steps will ensure that CloudTrail can successfully write logs from all member accounts to the central S3 bucket?

A healthcare enterprise is designing a new patient monitoring application. The application runs on Amazon ECS tasks inside a Data Ingestion account (Account 123456789012) and must write clinical telemetry files directly to an Amazon S3 bucket in a Centralized Analytics account (Account 987654321098). The S3 bucket is encrypted using server-side encryption with AWS KMS (SSE-KMS). To comply with HIPAA requirements, the encryption keys must be managed in the Centralized Analytics account. Which combination of configurations must the Solutions Architect implement to allow the ECS tasks to write to the S3 bucket?

A financial technology organization is designing a hybrid network architecture for its AWS environment. The environment consists of $40$ spoke VPCs across multiple AWS accounts in the us-east-1 Region, along with a centralized Shared Services VPC. The organization needs to connect its AWS resources to an on-premises data center.

The connectivity design must meet the following requirements:
1. High-throughput hybrid connectivity must be established using a primary AWS Direct Connect connection, with a Site-to-Site VPN connection acting as a backup.
2. All traffic between the spoke VPCs and the on-premises network must be inspected by a cluster of third-party firewall appliances deployed in the Shared Services VPC.
3. The spoke VPCs must be able to resolve private on-premises domain names using Route 53 with minimal administrative overhead.
4. Egress traffic to the internet must be highly available and centralized through the Shared Services VPC.
5. Administrative overhead must be minimized, and the solution must scale automatically as new spoke VPCs are added.

Which of the following architectures satisfies these requirements?

A logistics company is designing a hybrid network architecture to connect its on-premises data center to its AWS environment. The environment consists of 12 spoke VPCs across two AWS Regions: us-east-1 and us-west-2. The company requires a highly available, private connection with a backup path. A 10 Gbps AWS Direct Connect (DX) connection has been established. To minimize costs while ensuring high availability, the company will use an IPsec VPN over the internet as a backup. The architecture must support dynamic routing and automatic failover. Which of the following configurations are required to meet these requirements? (Select TWO.)

A media broadcasting company is planning a global live-streaming event that expects a massive flash crowd of $15,000,000$ concurrent viewers to authenticate, fetch metadata, and establish session states within a $5$-minute window. The current architecture consists of an Application Load Balancer (ALB) routing requests to a containerized microservices fleet on Amazon Elastic Container Service (ECS) on AWS Fargate, and Amazon Aurora PostgreSQL for the database layer. Video metadata changes infrequently, but session states require sub-millisecond updates and must survive an Availability Zone outage. Which combination of architectural optimizations should the Solutions Architect implement to ensure the platform scales seamlessly and maintains performance during the initial traffic spike? (Select THREE.)

A logistics and supply chain enterprise is modernizing its fleet dispatching and tracking application by migrating its core API to a serverless architecture on AWS. The API must handle highly bursty and unpredictable transaction volumes, spiking up to $15,000$ requests per second. The backend logic runs on AWS Lambda and reads from an Amazon Aurora PostgreSQL database cluster deployed in a private VPC subnet. To protect the database from connection exhaustion, an Amazon RDS Proxy has been deployed. The API Gateway endpoint is private, accessible only from the company's corporate offices through an existing AWS Direct Connect connection. The architect must ensure that:

1. Bursty traffic spikes do not exhaust the regional Lambda concurrency limit, which would throttle other critical serverless workloads in the same AWS account.
2. The database credentials, stored in AWS Secrets Manager, are rotated automatically every $30$ days and encrypted using a KMS key that can be shared with a monitoring tool in a separate security audit account.
3. The serverless compute layer remains highly available and resilient to Availability Zone failures.

Which combination of actions should the Solutions Architect implement to meet these requirements? (Select TWO.)

A telemetry collection system running on Amazon EC2 instances in Account A needs to publish environment alerts to an Amazon SNS topic in Account B. To meet internal security and compliance policies, the SNS topic must be encrypted at rest. The Solutions Architect needs to design a secure, least-privilege configuration to allow the instances in Account A to publish to the topic in Account B. Which configuration will allow the EC2 instances in Account A to publish to the SNS topic in Account B while maintaining encryption?

A logistics company manages $120$ member accounts within an AWS Organization. The security team is setting up an organization-wide AWS CloudTrail trail to log all API activity to a centralized Amazon S3 bucket in a dedicated Logging account. The requirements state that all logs must be encrypted using an AWS KMS Customer Managed Key (CMK) and that access must follow the principle of least privilege. Which TWO configuration steps are required to achieve this goal?

A financial services company is migrating its backend payment processing microservice to a serverless architecture using Amazon API Gateway and AWS Lambda. Due to strict compliance and risk mitigation guidelines, any deployment of a new code version must be exposed to production traffic gradually. Specifically, the new version must receive 10% of traffic initially, and then the remaining traffic must be routed in equal increments of 10% every 10 minutes. If the payment processing latency exceeds 500 ms or if the Lambda error rate exceeds 1% at any point during the deployment, the deployment must automatically and immediately roll back. Additionally, the Lambda function relies on a database connection pool that must be fully initialized and pre-warmed before the new version starts serving any production traffic to prevent connection timeout errors during the initial traffic shift. Which deployment strategy should the solutions architect implement to meet these requirements with the least operational complexity?

A digital media company is hosting a live pay-per-view sporting event. Within a $5$-minute window before the broadcast begins, the web portal is expected to experience a sudden surge in traffic from $500$ requests per second to $300,000$ requests per second. The application runs on Amazon ECS with AWS Fargate behind an Application Load Balancer (ALB) and performs read-heavy entitlement verifications against an Amazon Aurora MySQL database. Which two actions should the solutions architect take to ensure the architecture scales efficiently and handles the sudden traffic spike without performance degradation? (Select TWO.)

A financial services company is designing a disaster recovery (DR) solution for a critical transaction auditing application. The application currently runs in the us-east-1 Region on Amazon ECS tasks using AWS Fargate behind an Application Load Balancer (ALB). The database tier uses a Multi-AZ Amazon Aurora PostgreSQL cluster. Outbound connections to external clearinghouses must go through NAT Gateways. The company needs to establish a DR site in the us-west-2 Region. The business requirements specify a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 5 minutes, while minimizing infrastructure costs during normal operations. Which of the following architectures meets these requirements most cost-effectively?

A gaming company is designing a new multiplayer game. The backend requires a database for a NoSQL workload to store real-time player session states with sub-millisecond latency. It also requires an Object storage solution to store historical game telemetry logs for analytical processing, which must be replicated to a centralized security logging account in a secondary AWS Region. The key performance indicators (KPIs) include write latency under $10\text{ ms}$ for player state updates, $99.99\%$ availability, and a disaster recovery requirement of Recovery Time Objective (RTO) under $15\text{ minutes}$ and Recovery Point Objective (RPO) under $5\text{ minutes}$. Encryption at rest is required for all data. Which two options should the solutions architect choose to meet these requirements?

A financial services company is launching a new transaction reporting API on Amazon ECS using AWS Fargate. A Solutions Architect must design a deployment strategy that routes exactly 10% of production traffic to the new version of the API, holds it there for a 30-minute validation window, and then shifts the remaining 90% of traffic to the new version. The deployment must automatically roll back within minutes if target response times exceed acceptable thresholds or if HTTP 5XX error rates spike. The solution must minimize costs and avoid DNS caching issues.

Which TWO actions should the Solutions Architect take to meet these requirements? (Select TWO.)

A medical device company is designing a high availability and disaster recovery architecture for its patient monitoring dashboard. The primary database runs on an Amazon Aurora PostgreSQL DB cluster in the us-east-1 Region. The system requires an RTO of 15 minutes and an RPO of 5 minutes. The architecture must span a secondary Region (us-west-2) for disaster recovery. The network design requires private connections from on-premises hospitals using AWS Direct Connect, routing through Transit Gateways in both Regions.

Which TWO network and database configuration designs should the Solutions Architect implement to meet the HA/DR requirements? (Select TWO.)

An enterprise needs to migrate $220\text{ TB}$ of legacy document archives from an on-premises NFS file system to an Amazon S3 bucket. The enterprise has a $500\text{ Mbps}$ internet connection, but to avoid impacting business operations, they can allocate a maximum of $150\text{ Mbps}$ of bandwidth for the migration, and only during a $10\text{ hour}$ daily off-peak window. The migration must be completed within $25\text{ days}$. Additionally, company compliance requires that the data be encrypted at rest using an AWS KMS key that is shared with a separate AWS audit account for security verification.

Which two actions should a solutions architect take to meet these requirements?

A major ticketing platform is preparing for a global concert ticket launch. The platform expects an instantaneous traffic spike, surging from a baseline of $2,000$ requests per second to $600,000$ requests per second within $3$ minutes (a $300\times$ increase). The current architecture consists of an Application Load Balancer (ALB) routing traffic to containerized microservices hosted on Amazon ECS using AWS Fargate. The microservices query an Amazon Aurora PostgreSQL database cluster for ticket inventory and real-time seat availability. The architecture must minimize latency, handle the massive flash traffic without dropping requests, and dynamically scale the read capacity of the database tier. Which of the following architectures meets these requirements with the highest performance and operational efficiency?

A major airline is preparing to launch a flash promotional event where discounted international flight tickets will be released at a specific second. The marketing department expects an immediate surge in traffic, with concurrent user connections scaling from fewer than $100$ to over $450,000$ within the first $60$ seconds of the launch. The backend application, running on Amazon ECS, queries flight availability from an Amazon Aurora PostgreSQL database (with a read-to-write ratio of $10:1$). The system must also store transient flight search filters and user session data, which requires a caching solution that supports Multi-AZ replication and data persistence to survive cache node failures. Which architecture optimization strategy will handle the peak traffic spike while maintaining low latency and preventing request failures?

A maritime shipping coordinator is modernizing its vessel container tracking and dispatch service by refactoring a legacy monolithic system into a microservices-based serverless architecture. The database has been migrated to an Amazon RDS for PostgreSQL DB instance in a private subnet. The serverless backend consists of AWS Lambda functions running in the same VPC to access the database, fronted by an Amazon API Gateway HTTP API. The system must scale up to handle sudden peaks of $12,000$ concurrent requests during port unloading operations, without exhausting database connections or affecting other services in the same AWS account. Security requirements dictate that all database credentials must be rotated automatically every $30$ days and encrypted using a Customer Managed Key (CMK) in AWS KMS.

Which TWO configurations should the solutions architect implement to meet these requirements?

A retail banking platform is launching a feature that gives customers real-time access to their investment portfolios. The platform expects an instantaneous spike of over $200,000$ concurrent users daily at exactly $09:00\text{ UTC}$ when the market opens. The application is hosted on Amazon EC2 instances within an Auto Scaling group behind an Application Load Balancer (ALB). The portfolio query engine reads data from an Amazon Aurora PostgreSQL database cluster. Which strategy should a Solutions Architect implement to handle this flash traffic without dropping customer requests or degrading query response times?

A telematics company is building a connected vehicle platform on AWS to ingest telemetry from a fleet of $1.5\text{ million}$ vehicles. Each vehicle transmits GPS and engine diagnostics every $10\text{ seconds}$ via HTTPS, producing a steady ingestion rate of $150,000$ requests per second. The platform must perform real-time geofencing checks (which require querying spatial boundaries) with a sub-$50\text{ ms}$ latency target, and persist all incoming telemetry for historical reporting. During peak rush hours, traffic can double within a $2$-minute window. Which of the following architectures is the most performant, scalable, and operationally efficient?